BO XI3.1 Auditor weird results

other Auditor
1

Good day,

We have a newly installed BO XI3.1 server and played with its auditor universe. I got this results which is obviously not right in terms of formating ( in “Action Time”) and results thrown (in “Action Hour”). Is there anyone out there who could shed some light in this?

Thanks in advance.

John Vincent
hmm.jpg

jvmauricio :philippines: (BOB member since 2009-08-03)

2

Check the auditing database

RikDeclercq :belgium: (BOB member since 2006-09-28)

3

Hi! RikDeclercq

Where i can find that Auditing Database! ?

:crazy_face:

Thanks!
MeZ :wave:

mez19 (BOB member since 2009-08-10)

4

One way is to check where the Activity universe is pointing to.

RikDeclercq :belgium: (BOB member since 2006-09-28)

5

Hi John,

1. Action Time:
You can Format the ActionTime to your needs using FormatDate function.
2. Action Hour:
Can you be specific about the Action Hour part and what you expect ?
Do you think the Hours shown are wrong ?

Thanks

forgotUN (BOB member since 2006-12-13)

6

Good Day sir,

thanks for the reply, i finaly got the actiontime using FormatDate :smiley: however the actionhour i think is wrong coz it only show 6 AM and 7 AM which actually must vary because actions of the documents happen in different time. any opinion in this?

Thanks in advance
:o

jvmauricio :philippines: (BOB member since 2009-08-03)

7

Check the date-time settings of your database with your DBA, they might be set in a different time-zone.

RikDeclercq :belgium: (BOB member since 2006-09-28)

8

Hi,

The hours will be in difference of + or - X hrs(Local Time=UTC±X),because Audit Timestamps are recorded in UTC. To get the Timestamps in Localtime,You need to adjust the Time Objects in Activity Universe.
Example:
Oracle Audit DB:

AUDIT_EVENT.Start_Timestamp-(((sys_extract_utc( to_timestamp_tz( sysdate,'DD-MM-YYYY HH24:MI:SS TZR' ))- sysdate)))

SQLServer Audit DB:

dateadd(hour,-datediff(hour,getdate(),getutcdate()),AUDIT_EVENT.Start_Timestamp)

Thanks
-Satish

forgotUN (BOB member since 2006-12-13)

9

Good Day Satish,

Thanks again for the reply, i didnt know the audit stores it in UTC, would that mean that everytime there is an action to the document it gets the time from the region where the action took place? (say a geo scattered organization making reports from different regions)

Kindly tell me if im missing something.

Thanks :smiley:

jvmauricio :philippines: (BOB member since 2009-08-03)

10

Hi ,
I am not sure about this, Please correct me if I am wrong.
My understanding is where ever the user is, the time is recorded in UTC (GMT). The purpose is to Audit the Enterprise server or system align with Local server time.
For example, if BO Enterprise servers are located in Australia and a user logged in to Infoview from USA Pacific Time at 15 Oct 2009 9:00:00 Am,the CMC will record the Time as (UTC-8.) 15 Oct 2009 01:00:00 AM UTC time in Audit Database.
When audit report is run, user session start time will be shown as 15 Oct 2009 01:00:00 AM., which is in UTC.To Audit the information in Local Australian Time (Server location) we need to edit the Time Objects in Activity universe to reflect the Local Australian time.
15 Oct 2009 01:00:00 AM + 10 = 15 Oct 2009 11:00:00 AM i.e UTC_AuditTimeStamp+10=Australian Time

User login from US Pacific Time region 15 Oct 2009 9:00:00 Am -------> Recorded as 15 Oct 2009 01:00:00 Am UTC (UTC-8)
User login from US Central Time region 15 Oct 2009 9:00:00 Am -------> Recorded as 15 Oct 2009 03:00:00 Am UTC (UTC-6)

After Editing the Time Objects in Activity Universe
Audit Time in Server Region (Australia)------> Above UTC times+10=15 Oct 2009 11:00:00 Am, 15 Oct 2009 01:00:00 PM

Its better to go though Auditing Manual to understand how Auditing works.

Thanks

forgotUN (BOB member since 2006-12-13)

11

Good Day Satish,

Now its getting clearer to me though i dont know if i get this right. the CMC used that kind of structuring to generalized the audit time stamp so that it can be flexible enough at report level when determining the action time whether by region or local server time.

Kindly tell me if im missing something and if someone can share some auditing manual/resources it would be much appreciated. :smiley:

Thanks in advance

John Vincent

jvmauricio :philippines: (BOB member since 2009-08-03)

12

Hi,
Yep, thats right.
Here is 3.1 Administration Manual Link where you got a Chapter 13 for Audting. There is some notes on page 604 about UTC time.

Thanks
-Satish

forgotUN (BOB member since 2006-12-13)

13

Hi Satish,

Wow this is such a big help, I really appreciate it thank you. :smiley: now its time for me to do my homework :wink:

Regards!

John Vincent

jvmauricio :philippines: (BOB member since 2009-08-03)